CVE-2007-5413

Currently unrated

Key Information:

Vendor
HP
Status
Openview Configuration Management
Openview Client Configuraton Manager
Vendor
CVE Published:
29 October 2007

Summary

httpd.tkd in Radia Integration Server in Hewlett-Packard (HP) OpenView Configuration Management (CM) Infrastructure 4.0 through 4.2i and Client Configuration Manager (CCM) 2.0 allows remote attackers to read arbitrary files via URLs containing tilde (~) references to home directories, as demonstrated by ~root.

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document...
vendor-advisoryx_refsource_HP
http://www.securityfocus.com/archive/1/483106/100/100/thr...
mailing-listx_refsource_BUGTRAQ
http://osvdb.org/39528
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.